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IN THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

What is Claimed is: 

1 . (currently amended) In a Montgomery multiplication algorithm, a method of 
computing an output xyR'* mod m from input integers m = {ntn-x ... m\mo)\y,x=' {xnA ... x\xo)b, y 
= (V/i-i ... >'iJ^o)b, with 0 < X, y < m, R = b" with gcd(/w, b) = I, and m' = -m~^ mod b 
comprising the steps of: 

representing a value A in the Montgomery multiplication algorithm with a 
redundant notation; and 

performing carry-save addition within an iterative process of the Montgomery 
multiplication algorithm to compute a new value of A . and further comprisiuR 
executing the algorithm: 

a, S 0 and T 0 (where S = (s„ s „.] ... s \So)h and T= (tntn^.^. t\tq)h,^ 

h. For / from 0 to (n-D^ do the following: 

bl . Uj <^ (^^'^ ^jVQ^ ^ ' mod b 

b2. (S,T)<^(S + T+ XiV + um)/b 

c. A ^ ^S^ rand^7 T-m 

d. If ^7 > 0 then A <^ A7 else A <- Ai 

e. Retum A. 

2. (cancelled) 

3. (currently amended) The method of Claim [2] i, wherein the value of b is two. 

4. (currently amended) The method of Claim [2] i, wherein step b2 of the 
algorithm ftirther comprising selecting one of y-\-m, y, or 0 to be added to S and T. 
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5. (original) The method of Claim 1, wherein said representing step further 
comprises replacing said value of A with two other values, wherein a sum of the other two 
values equals said value of A. 

6. (original) The method of Claim 1, wherein said performing step further 
comprises performing said carry-save addition in parallel. 

7. (original) The method of Claim 1, wherein said performing step further 
comprises executing said iterative process a plurality of times equal to a number of bits 
representing said value of x. 

8. (currently amended) A method of performing a Montgomery exponentiation of 
x^ mod m wherein the notation Mont(x, y, m) denotes the Montgomery multiplication 
algorithm yxR'^ mod m from input integers m = (w„.i ... wiWo)b,^ = (xn-\ ... x\xo)h. y = (yn-\ 
y\yo)b, with 0 < X, y < m, R = with gcd(/w, b) = I, and m' = -nT^ mod b comprising the 
steps of: 

representing a value A in the Montgomery multiplication algorithm with a 
redundant notation; and 

performing carry-save addition within an iterative process of the Montgomery 
multiplication algorithm to compute a new value of A . wherein m has s bits, e has t+1 
bits, and 0<x<m, and the Montgomery exponentiation is performed according to the 
algorithm: 

a, Compute R = b^ 

b, Compute R*R mod m 

c, Compute z = Mont(x, R*R mod m, m) 

dL Compute B = R mod m 

e, For i from t to 0 do the following: 

e.l B = Mont (B, B. m) 

e.2 If Ci = 1 then B = Mont (B, z, m) 

f B = Mont(B, Km) 
g. Return B . 
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9. (cancelled) 

10. (original) The method of Claim 8, further comprising executing the algorithm 
for Mont (x, y, m): 

a. S ^ 0 and T ^ 0 (where S = {SnS^.i ... s\So)b and r= (tntn-\ ... t\to)b-) 

b. For i from 0 to («-!), do the following: 
bl . Ui<^ (sq + /o + xiyo) m ' mod b 
b2. (5', 7) <- (5 -h T + jc^y + Uim)/b 

c. ^1^5+ rand ^2^-5+ T-m 

d. If ^2 ^ 0 then A <^A2 else A <r- Ai 

e. Retum A 

1 1 . (original) The method of Claim 10, wherein the value of b is two. 

12. (original) The method of Claim 10, wherein step b2 of the algorithm further 
comprising selecting one of y+m, y, or 0 to be added to S and T. 

13. (original) The method of Claim 8, wherein said representing step further 
comprises replacing said value of A with two other values, wherein a svmi of the other two 
values equals said value of^. 

14. (original) The method of Claim 8, wherein said performing step further 
comprises performing said carry-save addition in parallel. 

15. (original) The method of Claim 8, wherein said performing step further 
comprises executing said iterative process a plurality of times equal to a number of bits 
representing said value of jc. 

16. (original) The method of Claim 8, further comprising solving a plurality of 
Montgomery multiplication problems simultaneously. 

17. (original) The method of Claim 16, and further comprising controlling 
selection of values to be added to S and T corresponding to each said of said plurality of 
Montgomery multiplication problems. 
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18. (original) An apparatus for performing a Montgomery multiplication for an 
output of xyR'^ mod m and an input of w = ... m\mo)h, x = {xn-\ ... x\xo)b. y = (y«-i 
y\yQ)b. with Q<x,y<m,R^b'' with gcd(AW, b)=\, and m" = ~m~^ mod 6, comprising: 

a plurality of storage units, with each one of the plurality of storage units 
corresponding to a value of m, y, S and T, where A = S + wherein the 
corresponding storage unit for x can shift its value, and the corresponding storage 
units for S and Tcan be set to zero; 

an adder configured to add the k terms from x\ times the k terms from Ui 
times m, and S and T; and 

a carry look- ahead adder configured to add any one set of values from a group 
including S and T, and S shifted and T shifted, 

19. (original) The apparatus of Claim 18, wherein for b greater than or equal to 
two, the adder fiirther comprises a carry-save adder within an iterative process of the 
Montgomery multiplication algorithm to compute a new value of ^. 

20. (original) The apparatus of Claim 19, wherein said carry-save adder further 
comprises a Wallace tree. 

21 . (original) The apparatus of Claim 1 8, wherein b is equal to two. 

22. (original) The apparatus of Claim 21, wherein the adder fiirther comprises a 
fixll adder configured to add input values of S, T, and any one value from a group consisting 
of m,y, m+y^ zero, and to produce a sum value and a carry value. 
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23. (original) The apparatus of Claim 18, wherein said plurality of storage units 
and said added are operatively coupled to execute the algorithm: 

a. S ^ 0 and T 0 (where S = (SnSn-x ... s\So)b and T= (tntn-i htojb-) 

b. For i from 0 to («-l), do the following: 
bl . Ui<r- (so to + x(yo) m ' mod b 
b2. (5, 7) (5 + T + jc^y + Uim)/b 

24. (original) The apparatus of Claim 23, wherein said carry look-ahead adder is 
adapted to execute the algorithm: 

c. Ax<-S+ rand^2 <r- S + T - m 

d. IfA2>0thenA <-A2elseA <^Aj 

25. (original) The apparatus of Claim 23, wherein the storage units corresponding 
to said value of x, y, m, y+m, S, and T are further adapted to hold a plurality of Montgomery 
multiplication problems that are solved simultaneously, and further comprising means for 
controlUng the selection of values to be added to S and T corresponding to each said of said 
plurality of Montgomery multiplication problems. 

26. (original) The apparatus of Claim 25, wherein for each of said plurality of 
Montgomery multiply problems, the carry look-ahead adder is adapted to execute the 
algorithm: 

c. Aj + TandA2 T-m 

d. IfA2 >0, then A <—A2, else A <^Aj. 
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